Differences between revisions 3 and 36 (spanning 33 versions)
Revision 3 as of 2006-01-26 13:14:30
Size: 4869
Comment:
Revision 36 as of 2017-08-22 12:55:59
Size: 5602
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
  NICHT FERTIG!!
Line 5: Line 3:
== Notebook Registration at DESY Zeuthen == /!\ '''This web page will no longer be updated.''' Please use this link for [[https://dv-zeuthen.desy.de/services/notebook_registration/|current information]].
----
<<BR>>
Line 7: Line 7:
[[TableOfContents]] [[http://dvinfo.zeuthen.desy.de/NoteBook_Registrierung|NoteBook Registrierung ]] {{http://www-zeuthen.desy.de/icons/german.gif}}

<<TableOfContents>>
Line 11: Line 13:
 * To connect a notebook or an other mobile device to the DESY Zeuthen network the responsible person and the MAC addresses of the device have to made known with the computer center.
 * Two different network access methods exists, one to the internal network and the other one corresponds approximately to the one of an externel host.
 * The DESY Computer Security Council (RSR) demands that the person who wants to use a computer in the internal DESY network, feels also responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.
 * To connect a notebook or other mobile device to the DESY Zeuthen network, the responsible person and the MAC address(es) of the device have to be registered with the computer center.
 * Two different classes of network access exist:
  * One with access to the internal network
  * The other one is mostly like that of anonymous hosts somewhere on the internet
 * The [[http://rechnersicherheit.desy.de/e8/index_eng.html|DESY Computer Security Council (RSR)]] requires that a person who wants to attach a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user, who needs to be in possession of an account at DESY, the device will be classified as a trusted device.
Line 15: Line 19:
In the following you can find some more information about the both network access classes, WLAN and also cable attached access. In the following you can find some more information about both network access classes, WLAN and also cable attached access.
Line 17: Line 21:
=== Network Access - 2 classes === == Network Access - 2 classes ==
Line 19: Line 23:
==== Limited Access ( guest subnet ) ====
    In the guest subnet a cable based and a wireless network interface are provided. [[BR]]
    The guest subnet is mainly provided for guests staying at DESY for a short time and is available during a few minutes. Internal services can only be used very limited (no Login in Windows Domain, limited AFS access). The access rights basically correspond to them of the external hosts.
    ||<tablestyle="background-color:#FFE0DF;">The [:mac address: MAC addresses] of the device and the responsible person must be made known to the computer center.||
    The registration can be made
    * by an email to uco-zn@desy.de, processing during normal working hours,
                              {{{
    Subject: Registration of a Notebook
=== Limited Access ===

==== DESY-guest ====
In the DESY-guest network, a cable based and a wireless network interface are provided. <<BR>>
The DESY-guest subnet is mainly provided for guests staying at DESY for a limited time. Gaining access to it only takes a few minutes. Access to internal services is limited (no Login into Windows Domain). The access rights basically correspond to those of anonymous external hosts, but some services (email, printing, AFS, ntp, web) are available.
||<tablestyle="background-color:#FFE0DF; width:100%">The [[mac_address| MAC addresses]] of the device and the responsible person must be made known to the computer center.||
The registration can be done
 * by sending an email to <<MailTo(uco-zn AT desy DOT de)>> (processed by humans during normal working hours)
 {{{
Subject: Registration of a Notebook
Line 28: Line 34:
    Mac WLAN:  Mac Eth:
    Expiration date of the registration: (max: 1 year, default: 7 days)
                              }}}
    * by a WEB form [[BR]]
  http://register.ifh.de/cgi-bin/register?conf=notebook [[BR]]
    The URL is available inside the LAN (guest subnet excluded) and can used by every user, who has an account at DESY. 15 minutes after the registration the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.
Mac WLAN:
Mac Eth:
Requested expiration date for the registration: (max: 1 year, default: 7 days)
}}}
 * or through a web form (automatic processing 24x7) <<BR>>
 https://regmacs.zeuthen.desy.de/  <<BR>>
 The URL is accessible from the '''internal''' network and can used by any user who has an account at DESY. 15 minutes after submitting the form, the registered device should be able to access the guest subnet. The expiration date of the registration is limited to one year, the default is one week.
Line 35: Line 42:
==== Internal Access for trusted Devices ==== ==== eduroam ====

The wireless network eduroam is another WLAN guest network which is provided. It can be used by guests whose home institutes offer the service eduroam. No further registration at DESY is required. DESY employees can take part in the eduroam project.<<BR>>
Please contact <<MailTo(uco-zn AT desy DOT de)>> to obtain a WLAN account for 'eduroam'.
||<tablestyle="background-color:#FFE0DF; width:100%">Detailed information can be found at [[http://it.desy.de/services/networks/wlan_at_desy/eduroam/index_eng.html|eduroam]]||

=== Internal Access for Trusted Devices ===
Line 37: Line 50:
===== trusted Devices =====
The DESY Computer Security Council (RSR) has determined in a statement the following rules:
   http://www.desy.de/rsr/intern/rsr-stat-2003-01-rules.html
With a sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen:
{{{
         eMail : uco-zn@desy.de
         Fax : +49 33762 77216
         Adresse : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen}}}
==== Trusted Devices ====
The DESY Computer Security Council (RSR) issued a set of rules and recommendations to be followed by anoyone operating computers attached to the DESY internal network:
   http://rechnersicherheit.desy.de/e8/e84/e351/index_eng.html
By signing the form mentioned there, you acknowledge and accept these rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen: <<BR>>
||<tablestyle="background-color:#FFF2E5; width:100%">eMail : <<MailTo(uco-zn AT desy DOT de)>><<BR>>Fax : +49 33762 77216<<BR>>Address: DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen||
Line 46: Line 56:
A device is classified as trusted device if the signature of the responsible person is existent. [[BR]]
For DESY Notebooks, which are in central support of DV Zeuthen, should only take attention:
   [http://dvinfo.ifh.de/NotebookSecurityWindows Notebook Security Windows] und
   [http://dvinfo.ifh.de/NotebookSecurityLinux Notebook Security Linux ] [[BR]]
For DESY notebooks centrally supported by DV Zeuthen, you only need to turn your attention to [[NotebookSecurityWindows|Notebook Security Windows]]<<BR>>
and sign a special form when the notebook is claimed from the computing after installation.
Line 51: Line 59:
===== Cable based Network Access =====
 * Unfortunately at present it is not possible to transfer all cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.
 * The computing center Zeuthen are not able to register the cable Mac address in DESY, Hamburg for you. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, Hamburg to register the cable based interface.
==== Cable Based Network Access ====
 * It is not yet possible to transfer cable MAC addresses of notebooks already registered at DESY Hamburg to Zeuthen.
 * The computing center in Zeuthen is not yet able to register your cable Mac address in DESY Hamburg.<<BR>>Please contact the corresponding [[http://www-it.desy.de/network/intranet/services/dns/qip/qip.php|network segment administrator ]] in Hamburg if you need access to the cable based internal network in there.
Line 55: Line 63:
===== Wireless Network Access =====
 * '''In the internal WLAN you have to use the special SSID and WEP-Key.'''
 * These are identical for the internal networks at DESY, both in Hamburg and Zeuthen.
 * You will get the SSID and WEP key from uco-zn automatically after the receipt of the signed form.
 * The wireless network interfaces of devices registered at DESY, Hamburg are considered as trusted devices in Zeuthen too.
 * If the notebook should also connected to the WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will communicate the information to the network group at DESY, Hamburg and initiate the registration.
==== Wireless Network Access ====
Line 62: Line 65:
=== The Availability of Network Facilities ===
==== The Cable based Access ====
 * Notebooks can be connected to sockets in public rooms which were marked with a green dot.
 * It is not allowed to disconnect the office PCs from the network and to replace by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.
To use one of the internal [[http://dv-zeuthen.desy.de/services/wlan/| wireless networks]] a registration (MAC address, user name, institute, email address) is necessary. You will receive the access parameter from UCO. The registration is valid in Hamburg and Zeuthen.
Line 67: Line 67:
==== WLAN Availability ====
 * At the moment access points are available in the area of the Foyer and in the seminar rooms 1-3.

== Availability of Network Facilities ==
 
  * You have to contact the computing center to find out wether a certain socket is suitable for connecting a mobile device (no matter whether it's registered for internal access or for guest access only). To request clearing a socket for mobile device use, please email <<MailTo(uco-zn AT desy DOT de)>> . Please make sure to include the complete socket number.
 * Disconnecting a PC from any other network wall socket and connecting your notebook instead will block the socket.
 Please don't do this.

/!\ This web page will no longer be updated. Please use this link for current information.



NoteBook Registrierung http://www-zeuthen.desy.de/icons/german.gif

Notebook and Mobile Devices (Internet) Network Access @ DESY Zeuthen

  • To connect a notebook or other mobile device to the DESY Zeuthen network, the responsible person and the MAC address(es) of the device have to be registered with the computer center.
  • Two different classes of network access exist:
    • One with access to the internal network
    • The other one is mostly like that of anonymous hosts somewhere on the internet
  • The DESY Computer Security Council (RSR) requires that a person who wants to attach a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user, who needs to be in possession of an account at DESY, the device will be classified as a trusted device.

In the following you can find some more information about both network access classes, WLAN and also cable attached access.

Network Access - 2 classes

Limited Access

DESY-guest

In the DESY-guest network, a cable based and a wireless network interface are provided.
The DESY-guest subnet is mainly provided for guests staying at DESY for a limited time. Gaining access to it only takes a few minutes. Access to internal services is limited (no Login into Windows Domain). The access rights basically correspond to those of anonymous external hosts, but some services (email, printing, AFS, ntp, web) are available.

The MAC addresses of the device and the responsible person must be made known to the computer center.

The registration can be done

  • by sending an email to <uco-zn AT desy DOT de> (processed by humans during normal working hours)

    Subject: Registration of a Notebook
            
    Mac WLAN:
    Mac Eth:
    Requested expiration date for the registration: (max: 1 year, default: 7 days)      
  • or through a web form (automatic processing 24x7)
    https://regmacs.zeuthen.desy.de/
    The URL is accessible from the internal network and can used by any user who has an account at DESY. 15 minutes after submitting the form, the registered device should be able to access the guest subnet. The expiration date of the registration is limited to one year, the default is one week.

eduroam

The wireless network eduroam is another WLAN guest network which is provided. It can be used by guests whose home institutes offer the service eduroam. No further registration at DESY is required. DESY employees can take part in the eduroam project.
Please contact <uco-zn AT desy DOT de> to obtain a WLAN account for 'eduroam'.

Detailed information can be found at eduroam

Internal Access for Trusted Devices

Trusted Devices

The DESY Computer Security Council (RSR) issued a set of rules and recommendations to be followed by anoyone operating computers attached to the DESY internal network:

By signing the form mentioned there, you acknowledge and accept these rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen:

eMail : <uco-zn AT desy DOT de>
Fax : +49 33762 77216
Address: DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen

For DESY notebooks centrally supported by DV Zeuthen, you only need to turn your attention to Notebook Security Windows
and sign a special form when the notebook is claimed from the computing after installation.

Cable Based Network Access

  • It is not yet possible to transfer cable MAC addresses of notebooks already registered at DESY Hamburg to Zeuthen.
  • The computing center in Zeuthen is not yet able to register your cable Mac address in DESY Hamburg.
    Please contact the corresponding network segment administrator in Hamburg if you need access to the cable based internal network in there.

Wireless Network Access

To use one of the internal wireless networks a registration (MAC address, user name, institute, email address) is necessary. You will receive the access parameter from UCO. The registration is valid in Hamburg and Zeuthen.

Availability of Network Facilities

  • You have to contact the computing center to find out wether a certain socket is suitable for connecting a mobile device (no matter whether it's registered for internal access or for guest access only). To request clearing a socket for mobile device use, please email <uco-zn AT desy DOT de> . Please make sure to include the complete socket number.

  • Disconnecting a PC from any other network wall socket and connecting your notebook instead will block the socket. Please don't do this.

NoteBook_Registration (last edited 2017-08-22 12:55:59 by ManuelaBrehmer)